CVE-2020-7502: Schneider Electric Modicon m218 Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller.

Affected products

• Schneider Electric Modicon m218 Firmware: up to and including 4.3

Published 2020-06-16. Last modified 2026-06-17.